How to configure in the active directory domain controller to make the red box on the left side of the OU group all users under the batch configuration on the right side of the specified user group permissions